FactorAI
Demo ModeExit demoStart free

2 unread

#securitySlackOct 10, 05:16 PM UTC
riley@example.comRiley ChenEmailOct 10, 04:12 PM UTC
daniel@example.comDaniel OkoroEmailOct 10, 03:16 PM UTC
#vuln-mgmtSlackOct 10, 02:16 PM UTC
Mei TanakaNew inbound message waitingWhatsAppOct 10, 01:16 PM UTC
Hugo FernandezTelegramOct 10, 12:16 PM UTC
amara@example.comAmara NwosuNew inbound message waitingEmailOct 10, 11:16 AM UTC
#phishingSlackOct 10, 10:16 AM UTC
Team

#security

Slack

Is the new admin export endpoint safe to ship?
Oct 10, 05:00 PM UTC
Found one issue: the export accepts a team id from the query string without checking membership. Filed it as high severity with a reproduction and a suggested fix.
Oct 10, 05:04 PM UTCRead at · Oct 10, 05:04 PM UTC
Is there a fix in review?
Oct 10, 05:08 PM UTC
Yes, PR #2917 adds a membership check and returns 403 otherwise. I added a test that covers cross-team access.
Oct 10, 05:12 PM UTCRead at · Oct 10, 05:12 PM UTC
Block the release until it merges.
Oct 10, 05:16 PM UTC
Replies are available for active email channels.